[PHP] This code using _GET exploitable

2009-03-11 Thread filtered
Hi, we have script containing and http://example.com""; />'; } ?> Is this code prone to XSS attacks or for attacking the local webserver and if so, how? $cam isn't used anywhere else. -a -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.p

Re: [PHP] This code using _GET exploitable

2009-03-11 Thread filtered
On Wed, Mar 11, 2009 at 13:44, Jochem Maas wrote: > filtered schreef: >> Hi, >> >> we have script containing >> >>   > > let say I do: > > example.com/yourscript.php?studio=alert('I am > an evil haxor'); > > excusing the fact that t